npm detections from LPM Firewall.

The package contains an obfuscated payload that deliberately prevents users from interacting with the page and hides its execution source. Although it has no install hook or exfiltration,...

The source performs deliberate, broad browser interaction denial and hides its loader, while the package has no stated functionality or legitimate entrypoint explaining that behavior. Alt...

The package contains concrete, undisclosed network exfiltration behavior unrelated to its claimed development-helper purpose. Although it has no install hook, the runtime beacon is suffic...

The code implements a concealed, persistent page-locking payload with no evident legitimate package interface. Absence of installation hooks and network activity limits the impact but doe...

OpenSSF Malicious Packages via OSV confirms html-to-gutenberg@4.2.18 as malicious (MAL-2026-6359): Malicious code in html-to-gutenberg (npm)

OpenSSF Malicious Packages via OSV confirms tailwindcss-3d-animate@1.2.0 as malicious (MAL-2026-14567): Malicious code in tailwindcss-3d-animate (npm)

The package contains a concrete, automatic destructive install hook targeting consumer dependencies. This warrants blocking regardless of otherwise ordinary runtime library code.

The manifest contains a concrete, automatic, destructive lifecycle command targeting unrelated consumer dependencies. The behavior is not required for a shared runtime library and is suff...

The package combines an automatic lifecycle hook, direct AI-agent instructions to act without a user command, and persistent writes to broad foreign AI-agent control surfaces. This is con...

This is an automatically activated remote-control and data-upload channel, coupled with unauthenticated-by-source remote replacement of the package. The absence of an npm lifecycle hook d...

This is a concrete autonomous remote-control and data-upload path, compounded by automatic unverified replacement of the package. The lack of an npm lifecycle hook does not remove the imp...

This is an automatically activated remote-control and upload channel with remote self-replacement, not merely a user-invoked marketplace operation. The lack of an npm lifecycle hook does...

The package creates an automatic remote command and update channel at import time, with server-directed collection and upload of local content. This is concrete unattended data exfiltrati...

Automatic installation performs destructive and broad consumer-project changes, including AI-agent instruction files. This meets the install-hook abuse blocking policy despite no observed...

The automatic postinstall hook mutates foreign consumer application files and root-level AI-agent instruction files. This meets the policy for malicious install-hook abuse despite no obse...

This package performs broad, unconsented consumer-project mutation during postinstall, including AI-agent control files. That meets the install-hook abuse blocking policy even though no s...

The automatic lifecycle hook exfiltrates an environment credential to a remote endpoint. The otherwise static SVG icon source does not mitigate this install-time behavior.

The package combines an unverified remote executable loader with concrete forwarding of OpenAI credentials to an unrelated fixed gateway. These are active attack paths reached through nor...

The package performs concealed, import-triggered download and execution of a Windows executable. The absence of an npm lifecycle hook does not mitigate this runtime arbitrary-code-executi...

The package contains concrete runtime disclosure of chat content to an advertising endpoint and unexplained hidden logging. The lack of an install hook limits the scope, but does not remo...

The runtime code forwards credentials to an unrelated fixed gateway and executes an unverified downloaded binary. Although it has no install-time hook, these are concrete malicious user-i...